“For a platform that powers a quarter of the websites in the world, WordPress is surprisingly insecure. The default settings leave a site open to being hacked a half-dozen different ways,” says Nate Hoffelder. Take six common sense steps to protect your site.